Privacy Policy

KULAK (“we”, “us”) operates this website and provides brand, web, product, and marketing design services, on a monthly subscription or as fixed-price projects. This policy covers the website and the ways we handle information when you get in touch or become a client.

When you book a call, we receive the name, email address, and any notes you provide through our scheduling tool. When you become a client, we collect what we need to do the work: your contact details, billing information, and the files, brand assets, and feedback you share with us.

When you browse the site, Google Analytics, the Meta Pixel, and PostHog record usage such as pages viewed, referring site, device type, and approximate region. They receive your IP address and browser details in doing so, and use cookies to recognise your browser when you come back. PostHog also records how you move through each page, such as clicks and scrolling, as a replay of your visit, with anything you type into a form hidden.

To reply to you, schedule and hold calls, deliver and bill for the work, and keep your project running. To understand which parts of the site are useful so we can improve it. To measure and improve our advertising on Facebook and Instagram, including whether an ad led to a booked call. We do not sell your information to anyone.

This site uses Google Analytics 4, the Meta Pixel, and PostHog. They set cookies in your browser (_ga and _ga_SW35P9R70R for Google Analytics, _fbp and _fbc for Meta, and one ending in _posthog for PostHog, which it also keeps in your browser's local storage) so we can see how the site is used and measure and improve our advertising. The Meta Pixel can also read the name and email address you type into a form on this site, such as the contact form, and hashes them before sending them to Meta so it can match your visit to a Meta account. Our hosting provider, Vercel, also counts page views with Vercel Web Analytics, which sets no cookies and cannot recognise you from one day to the next.

When you book a call, our scheduling tool, Calendly, sends you back to this site with your booking details in the web address: your name, email address, company, the services you chose, the meeting time, and a booking reference. Our server takes them out of the address before any page loads and keeps only your name, email address, meeting time, and booking reference. The full address may still appear in our hosting provider's request logs for a short time.

Your first name and the meeting time are kept in a cookie (kulak_booking) for thirty minutes so the confirmation page can show your booking. Your name, email address, and booking reference are kept in a second cookie (kulak_booking_match) for at most five minutes, and deleted as soon as the confirmation page has used them to report the booking to Meta, so we can measure whether our ads lead to booked calls. Your name and email are hashed before they are sent to Meta. The booking reference is sent as it is, so the same booking is not counted twice.

If you arrive from one of our ads, the campaign tags in its link are kept in your browser for that visit and added to our Calendly link, so Calendly can record which ad led to your booking.

You can opt out of ads based on your activity at https://www.facebook.com/adpreferences and of Google Analytics at https://tools.google.com/dlpage/gaoptout. Blocking or clearing cookies and site data in your browser also works. Some US state privacy laws treat advertising cookies like these as “sharing” personal information; the same links and settings are how you opt out of that. Our scheduling and payment tools may set their own cookies when you use them; those are governed by their policies, linked from their pages.

We share information only with the services we need to run the studio: our scheduling tool for booking calls, our payment processor for billing, our hosting provider for this site, Google, Meta, and PostHog for the analytics and ad measurement described above, and the design and collaboration tools we use to deliver work. Each handles data under its own terms, and Google and Meta may also use what they receive for their own purposes, as their privacy policies describe. We share information with authorities only when the law requires it.

Enquiries we do not pursue are deleted within twelve months. Client records, project files, and invoices are kept for as long as we work together and for seven years afterward to meet accounting obligations, then deleted. Google, Meta, and PostHog keep analytics and advertising data for the periods set by their own policies and our account settings.

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it. If you are in the UK, EU, or California, you have additional rights under GDPR and CCPA, including the right to object to processing and to lodge a complaint with your local authority. Email us and we will respond within thirty days.

Project files live in access-controlled tools with two-factor authentication. Billing details are handled entirely by our payment processor and never stored on our systems. No method of transmission is perfectly secure, so we ask that you never send passwords or payment details over email.

Our services are for businesses. We do not knowingly collect information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

If we change how we handle information, we will update this page and the date at the top. Material changes affecting current clients will also be sent by email.

Questions about privacy go to ted@kulak.co.